https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:39:55.207626+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338409 EUVD-2026-338409 2026-10-08T16:39:55.297681+00:00 EUVD-2026-338409 https://cve.radiocsirt.org/vuln/fkie_cve-2026-13401 fkie_cve-2026-13401 2026-10-08T16:39:55.297723+00:00

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes.

The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.

Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition.

 https://cve.radiocsirt.org/vuln/ghsa-8299-xh3w-xhx5 GHSA-8299-xh3w-xhx5 2026-10-08T16:39:55.297763+00:00

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes.

The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever.

Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11351-1 openSUSE-SU-2026:11351-1 — perl-XML-Bare-0.53-7.1 on GA media 2026-10-08T16:39:55.297783+00:00

perl-XML-Bare-0.53-7.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-13401 UBUNTU-CVE-2026-13401 2026-10-08T16:39:55.297803+00:00

Affected: Ubuntu:16.04:LTS: libxml-bare-perl, Ubuntu:18.04:LTS: libxml-bare-perl, Ubuntu:20.04:LTS: libxml-bare-perl, Ubuntu:22.04:LTS: libxml-bare-perl, Ubuntu:24.04:LTS: libxml-bare-perl, Ubuntu:26.04:LTS: libxml-bare-perl

XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. The parserc_parse function never advances the attribute-parse state cursor on certain malformed attribute forms, looping forever. Nameless attributes such as "<a ='c'>" or unbalanced quotes "<a b='''''''c'>" can trigger this condition.